Databricks is the data and AI company, and they are seeking a Senior Security Assurance Engineer to lead compliance certification efforts for the U.S. Federal Government. This role involves developing ATO packages, ensuring audit readiness, and managing security compliance across the organization.
Responsibilities:
- Develop Databricks ATO packages
- Ensure audit readiness and security compliance across the organization by working cross-functionally with other teams such as Engineering, IT, and HR
- Collect and manage evidence for audits
- Lead continuous monitoring and authorizations
- Support other Security Assurance Team certifications, reports, and activities as needed
- Support security compliance reviews of new features
- Build relationships with other Databricks teams to accomplish Security Assurance goals
- Develop and maintain strong relationships with external auditors and certification bodies to facilitate smooth audit processes
Requirements:
- Bachelor's degree in Computer Science or related field, or equivalent experience
- 5+ years of security compliance or audit related experience
- FedRAMP and/or DISA SRG auditing (3PAO) or implementation (CSP) experience
- NIST 800-53 and RMF experience
- A comprehensive understanding of security controls across all domains
- A general understanding of key technical security controls in cloud environments (AWS, Azure, GCP)
- Strong written and verbal communication skills
- Experience working effectively across the spectrum of individual contributors and senior leadership within an organization (for example, Engineering IT, Security, etc.)
- Active U.S. Government Top Secret/Secret Compartmentalized Information (TS/SCI) clearance with full scope polygraph